TI-2023-21356 CVE-2023-40551 · GHSA-6j62-7qgg-9gww
Shim: out of bounds read when parsing mz binaries
Priority LOW 23
A flaw was found in the MZ binary format in Shim.
Vulnerabilities
10 records
TI-2023-21351 CVE-2023-40546 · GHSA-9fh5-955w-9jfh
Shim: out-of-bounds read printing error messages
Priority LOW 28
A flaw was found in Shim when an error happened while creating a new ESL variable.
TI-2023-21354 CVE-2023-40549 · GHSA-86pm-fpxw-jjjc
Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file
Priority LOW 28
An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary.
TI-2023-21355 CVE-2023-40550 · GHSA-grx2-83w4-8647
Shim: out-of-bound read in verify_buffer_sbat()
Priority LOW 25
An out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information.
TI-2023-21353 CVE-2023-40548 · GHSA-7cf2-63mg-hv4j
Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems
Priority LOW 35
A buffer overflow was found in Shim in the 32-bit system.
TI-2023-21352 CVE-2023-40547 · GHSA-qjqj-4cq6-6f2f
Shim: rce in http boot support may lead to secure boot bypass
Priority MEDIUM 46
A remote code execution vulnerability was found in Shim.
TI-2022-11371 CVE-2022-28737 · GHSA-hmxr-46w2-jjwh
Out-of-bounds write in Red Hat Bootloader Team shim
Priority LOW 36
There's a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables; The handle_image() function takes into account the SizeOfRawData field from each section to be loaded.
TI-2014-02994 CVE-2014-3677 · GHSA-mcwp-922h-789p
Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a…
Priority LOW 38
Unspecified vulnerability in Shim might allow attackers to execute arbitrary code via a crafted MOK list, which triggers memory corruption.
TI-2014-02993 CVE-2014-3676 · GHSA-pg7r-qqvh-q4vw
Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via…
Priority MEDIUM 41
Heap-based buffer overflow in Shim allows remote attackers to execute arbitrary code via a crafted IPv6 address, related to the "tftp:// DHCPv6 boot option."
TI-2014-02992 CVE-2014-3675 · GHSA-4w72-8qcf-2x8f
Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted DHCPv6 packet.
Priority LOW 28
Shim allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted DHCPv6 packet.